Skill UI

Operate 20+ security tools like Nmap, SQLMap, and Nuclei via structured workflows for authorized penetration testing, vulnerability scanning, and exploitation. Supports information gathering, web exploitation, and password cracking.

This skill acts as an expert AI-powered code review specialist combining automated static analysis and intelligent pattern recognition. It leverages tools like GitHub Copilot, SonarQube, and CodeQL to identify bugs, vulnerabilities, and performance issues across 30+ languages. It supports CI/CD integration, security vulnerability analysis, architectural coherence checks, and actionable recommendations for maintainability and testability within modern DevOps workflows.

Coordinate a bounded code review from multiple perspectives including correctness, authorization, and performance. This skill helps review defined diffs or subsystems without installing orchestration engines. It involves reading diffs, choosing relevant perspectives, recording findings, and resolving disagreements through code or tests. Suitable for performance testing reviews where multiple agents or sequential perspectives are authorized.

General-purpose browser automation skill using Playwright. Auto-detects local dev servers, writes custom test scripts to /tmp, and executes them with a visible browser. Supports responsive testing, login flows, form submissions, and link checking.

A powerful toolset for automating core PostHog product analytics tasks via Rube MCP. It enables developers and analysts to capture user events, list and filter event data, manage feature flags (creation, retrieval, listing), and inspect user profiles. Ideal for integrating advanced product tracking and A/B testing workflows directly into development pipelines.

This skill generates complete, import-ready Postman Collection v2.1 JSON files from natural language API descriptions or cURL commands. It parses headers, authentication, body, and query parameters to create structured API collections and companion environment files. Ideal for API testing and development workflows.

This skill generates Newman CLI commands, configuration files, Jenkins pipeline scripts, and shell automation for running Postman collections in CI/CD or local environments. It helps automate API testing workflows by creating reusable scripts and pipeline configurations that integrate seamlessly with development and deployment processes, ensuring consistent test execution.

Converts OpenAPI 3.x or Swagger 2.0 specifications into Postman Collection v2.1 JSON files. Automatically maps paths, parameters, authentication, and generates example request bodies. Includes environment variable extraction for seamless API testing and development workflows.

Provides comprehensive techniques for escalating privileges from low-privileged users to root or administrator on Linux and Windows systems, covering sudo, cron, capabilities, token impersonation, and Active Directory attacks for authorized penetration testing.

A comprehensive collection of battle-tested prompt templates for role-based interactions, code review, debugging, testing, analysis, and creative brainstorming. Ideal for developers and AI users seeking structured prompting patterns.

This skill generates Puppeteer scripts for browser automation, web scraping, and PDF creation. It supports headless Chrome, network interception, wait strategies, and cloud integration for testing. Ideal for automating browser interactions and extracting data efficiently.

Generates pairwise test cases to reduce combinations while covering interactions, useful for software QA, configuration testing, and pypict workflows.